Skill UI

This guide details best practices for securing Ideogram API integrations. It covers essential steps like using environment variables for key storage, implementing key rotation procedures, establishing server-side proxies to prevent key exposure, and sanitizing prompts to mitigate data leaks. Use this when setting up, maintaining, or auditing API security infrastructure.

Guides security testers through identifying, exploiting, and remediating insecure direct object references in web apps, with methods covering reconnaissance, request manipulation, Burp Suite automation, and reportable mitigation steps.

Auto-activating Security Advanced skill that triggers on incident response planner requests, providing step-by-step guidance, compliant workflows, and production-ready configurations validated against standards.

Detects fail-open insecure defaults such as hardcoded secrets, weak auth, or permissive security that allow production apps to run unsafely, guiding auditors through discovery, verification, confirmation, and reporting steps during security reviews or deployment validation.

A comprehensive guide detailing security best practices for integrating with Instantly.ai. Learn how to implement least-privilege API scopes (e.g., campaigns:read), manage secrets using environment variables or dedicated secret managers, execute secure API key rotations, and validate incoming webhooks using custom headers. This skill is essential for developers building robust, secure, and scalable SaaS integrations.

Delivers automated guidance for ISO27001 gap analyzer requests in the Security Advanced domain, covering practical walkthroughs, production-ready artifacts, and validation checks that keep security operations aligned with enterprise compliance standards.

This comprehensive checklist guides the operational validation of the Juicebox AI talent search and analysis platform in a production environment. It ensures system reliability, data security, and service continuity by reviewing critical areas such as API key management, rate limit handling, robust error detection (circuit breakers, exponential backoff), data encryption (GDPR/CCPA compliance), and comprehensive monitoring setup. It is essential for preventing service failures and maintaining search data integrity.

Automated guidance for jwt token validator tasks within the Security Fundamentals domain, offering step-by-step help, industry best practices, and production-ready code/configuration generation when you mention jwt token validator or seek secure authentication patterns.

This skill provides step-by-step guidance for creating production-ready Kubernetes manifests. It covers essential resources including Deployments, Services, ConfigMaps, Secrets, and PersistentVolumeClaims. Use this skill when defining complete, robust containerized application architectures, managing network connectivity, stateful workloads, and ensuring adherence to Kubernetes best practices like resource limits and security contexts.

Guides implementing Kubernetes NetworkPolicy, RBAC, PodSecurityPolicy, Pod Security Standards, and OPA Gatekeeper constraints to enforce defense-in-depth across clusters, covering multi-tenant protection, admission control, and Istio service mesh policies.

This module provides a compliance-grade, tamper-evident logging solution for tracking all Kling AI operations. It records task submissions, status changes, and credential usage into structured, hashed logs. Use this when meeting regulatory compliance requirements or preparing for internal/external security audits.

A comprehensive framework for assessing the security, privacy, and compliance posture of Kling AI integrations. It covers crucial areas such as data residency, credential management, content policy adherence, and GDPR compliance (e.g., right to erasure). Use this guide when preparing for security audits or implementing robust data handling protocols for AI-generated content.